To deliver the Service, we share limited data with the following third-party providers. Each processes data under their own privacy policy and terms. This list is the single source of truth referenced in our Privacy Policy.
| Provider | Purpose | Data shared | Region |
|---|---|---|---|
| Supabase (database, auth, storage) | Authentication, PostgreSQL database, file storage, and application APIs | Account info, session data, and stored workspace content | US / EU (configurable) |
| Stripe | Payment processing, subscriptions, trials, optional credit packs, and customer billing portal; Stripe notifies us of subscription lifecycle events so we can update your account | Billing contact details, transaction and subscription metadata, and payment method references (full card numbers are processed by Stripe, not stored on our servers) | US / EU (Stripe infrastructure) |
| OpenAI | Content generation, keyword qualification, embeddings, SEO analysis | Business context, keywords, URLs, content for processing | US |
| Anthropic (Claude) | Content generation (outlines, articles) | Business context, extracted research data, content for processing | US |
| Google (Gemini) | Image generation for blog sections | Section headings and prompts for images; optional brand logo image when you enable branded images | US |
| DataForSEO | Keyword metrics (volume, difficulty, CPC) and, for some workflows, Google SERP data used in topic research | Seed keywords, queries, and titles sent for those requests | EU |
| SerpAPI | Search result analysis for topic research | Keywords and titles used for SERP lookup | US |
| Apify | Access to public web pages for fact extraction | URLs of public web pages used for content research | US / EU |
| Vercel / Railway (hosting) | Application and backend hosting | Network traffic, application data in transit | US |
| PostHog | Authenticated product usage analytics and performance monitoring | Pseudonymous user ID, product page paths, event names, event properties, browser metadata | US |
| Loops | Transactional email (e.g. password reset, account-related notifications) and operational alerts when you contact support | Email address, name, and message content required to deliver the email (including a summary of support requests when applicable) | US |
| Sentry | Error and performance monitoring for the application | Technical diagnostics and limited contextual data when errors occur (configured to minimize personal data) | US / EU (Sentry region settings) |
We select providers that offer appropriate data protection. Where required by jurisdiction, we maintain DPAs and standard contractual clauses (SCCs) or other transfer mechanisms. Last updated: April 2026.